Information Security Policy

We are committed to complying with all legal regulations and with information security rules contractually agreed with our customers and partners, as well as with the requirements of the ISO 27001 standard. At the same time, we work to continuously improve our information security management system.

We set relevant information security goals that we want to achieve, track them and measure our progress.

We have integrated the information security management system into our daily operations in order to implicitly adhere to the principles of information security in our internal processes.

We create the necessary technical and organisational prerequisites that enable us to practise the principles of information security.

We train and raise awareness among all employees who carry out activities in the scope of information security so that they can act confidently and deliberately according to information security principles.

We want to ensure that information security is understood by all of us as an essential principle with added value for our company, our customers, and our partners. Should we determine that the information security guidelines established in our processes are insufficient, we will take further measures to ensure information security and subsequently adapt our guidelines if necessary.

In particular, we are committed to a process-oriented management system and to improving information security through the application of a continuous improvement process.